Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8f72165-bb19-3e42-af3e-c77ceae3caeb.roa
File:                     f8f72165-bb19-3e42-af3e-c77ceae3caeb.roa (raw, json)
Hash identifier:          cbEEFC7lQyaRovpOy2Q8oS+XqhX/CKKz0PHlUFzVdw0=
Subject key identifier:   B9:84:42:9C:64:11:FB:EE:D9:BE:21:43:93:39:97:EA:F4:66:66:4B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA79E686A5C385E10DCAC7B80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8f72165-bb19-3e42-af3e-c77ceae3caeb.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        34.130.80.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:9e:68:6a:5c:38:5e:10:dc:ac:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=5f5ad3b0-0be7-4d68-adc1-0281ab0d5785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0c:ce:c7:52:2f:57:0a:bc:40:d0:d8:f1:ba:
                    69:fb:46:32:d0:ed:ab:6d:8b:73:76:8c:e1:5c:91:
                    c1:6f:e5:d6:ef:91:3a:63:fb:ee:c0:b6:f4:9a:b4:
                    d2:35:5e:09:a3:3e:e5:d7:c1:50:56:63:91:ed:16:
                    50:f0:f7:d4:59:d6:0e:85:4d:ec:55:ef:db:65:11:
                    0d:7c:29:8e:76:fd:51:ae:4e:12:21:09:92:75:82:
                    fc:e2:41:28:16:9a:bb:4c:c9:68:25:6c:52:71:26:
                    f6:79:c9:62:23:7e:b3:10:c3:4e:a2:dc:95:a3:da:
                    9e:7a:66:40:d6:c9:76:4e:a6:23:d7:d8:ca:0e:e2:
                    5b:0f:76:5b:34:84:f3:1a:b3:4a:04:99:a2:3f:bb:
                    77:bf:75:b9:d8:ee:90:f0:ab:6a:51:de:22:2b:53:
                    47:d3:e7:45:a2:1f:7a:0e:e6:c0:39:6c:b5:f5:3c:
                    6b:ad:e7:7a:b0:19:c5:7e:a2:1a:3c:cc:b5:00:d4:
                    07:9e:9b:1f:07:93:da:ac:9d:2b:54:aa:e1:b8:f3:
                    7c:07:4f:d8:07:77:53:80:4b:0f:1b:90:c9:16:68:
                    14:3a:c5:25:43:2d:57:6a:15:67:ce:43:67:6d:92:
                    c2:eb:43:9d:8b:e4:f5:1f:c0:ae:3d:63:cd:b1:3f:
                    8e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:84:42:9C:64:11:FB:EE:D9:BE:21:43:93:39:97:EA:F4:66:66:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8f72165-bb19-3e42-af3e-c77ceae3caeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.130.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:ce:ef:53:4e:3b:18:b0:71:b0:41:16:ad:3c:b0:b7:03:04:
         df:80:fc:e3:b9:81:3a:7d:75:1e:b0:40:30:51:32:fd:9b:d5:
         3b:83:9c:cc:77:ac:4c:0c:fa:63:bc:4d:24:34:41:a7:41:d3:
         58:3f:15:e2:43:49:ce:47:ac:bf:28:52:26:bc:cd:f1:fb:d9:
         26:2c:5a:d4:20:0a:df:df:5b:a9:03:bb:9a:ad:2b:9e:6d:d4:
         e6:1e:2e:10:38:8c:ef:dc:85:67:a1:0f:54:b2:85:ec:ca:36:
         72:c9:0a:61:0b:4b:f4:36:27:aa:4b:ef:42:95:9f:b4:55:8b:
         e3:24:4c:84:4c:b3:6f:a7:b7:b5:6d:c4:ae:a3:6e:b4:f1:f4:
         cf:97:69:ee:e8:2b:e5:8d:44:f1:95:7b:ce:74:17:bc:0f:90:
         76:90:84:a3:9f:15:ab:ba:76:f1:e8:30:00:ab:e1:e9:f0:ad:
         8f:b5:6d:77:e1:db:ed:89:71:61:55:5d:0c:82:4c:c5:95:05:
         47:29:88:9c:95:c6:52:4f:73:35:24:68:68:1f:55:4e:0e:20:
         ed:83:96:26:17:38:b9:8a:78:9f:08:06:d3:91:df:4c:f7:ec:
         94:ac:4b:42:f3:88:4d:25:47:25:da:b8:64:b8:99:fc:d0:d1:
         c7:e7:a9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:38:27 2025 by rpki-client